The canonical height of an algebraic point on an 

elliptic curve 

G. Everest and T. Ward 



Abstract. We use elliptic divisibility sequences to describe a method for es- 
timating the global canonical height of an algebraic point on an elliptic curve. 
This method requires almost no knowledge of the number field or the curve, 
is simple to implement, and requires no factorization. The method is ideally 
suited to searching for algebraic points with small height, in connection with 
the elliptic Lehmer problem. The accuracy of the method is discussed. 
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1. Introduction 

Let K denote an algebraic number field, with ring of algebraic integers Ok, and 
E an elliptic curve defined over if, given by a generalized Weierstrass equation 

(1) + aixy + asy — + a2X^ + a^x + oe, 

with coefficients ai, . . . , ag G Ok- Let Q = (x, y) denote a if-rational point of i?, 
Q e E{K). The global canonical height is a function h : E{K) R with the 
properties: 

1. h{Q) = if and only if Q is a torsion point of E{K). 

2. h{P + Q) + h{P -Q) = 2h{P) + 2h{Q) for aU P,Q £ E{K). 
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The second property is known as the parallelogram law. The global canonical height 
is of fundamental importance in the arithmetic of elliptic curves, due in part to its 
functoriality. The height appears in basic conjectures such as Birch-Swinnerton- 
Dycr and there is a deep conjecture known as the elliptic Lehmer problem, see 
[HS90], concerning lower bounds for the height. Besides theoretical considerations 
however, it sometimes happens that one really wishes to compute the value of the 
height (for example, to compute the determinant of the height-regulator matrix in 
searching for curves of large rank). 

Silverman [Sil88] described an algorithm for computing the global height, which 
can bo made arbitrarily accurate. In the rational case, this is implemented in Pari- 
GP (see [GP]). The algorithm in [Sil88] requires the discriminant of the curve to 
be completely factorized; computing the height when the discriminant cannot be 
factorizcd in reasonable time is considered in [Sil97]. Silverman's method requires 
much less than the full factorization of the discriminant but still requires some 
factorization. In principle, the method extends to the general algebraic case, though 
there is currently no implementation of Silverman's algorithm in the general case. 
When it is implemented, it is likely to enjoy the same high accuracy it does in the 
rational case. However there seems to be a small class of curves for which it is 
vulnerable (sec Examples 7 and 10 in Section 4). 

Tate's definition of the global height gives a factorization-free approach to com- 
puting the global height. Let Mk denote the set of valuations of K, each one 
corresponding to an absolute value | • |„ (see [Wei74] for background). For each 
valuation v € Mk, let Ky denote the corresponding completion of K. The naive 
height h{a) oi a & K \s 



For a finite point Q G E{K), set h{Q) = h{x{Q)), and for Q the point at infinity 
set h{Q) = 0. Tate's definition of the global canonical height is 



Knowledge of the naive height is essentially equivalent to knowledge of the minimal 
polynomial. 

Tate's definition is not usually considered to be a very useful method for actually 
computing the height. In principle it is accurate: However, it requires the compu- 
tation of large integers and this not only slows it down but makes high accuracy 
impossible in practice. On the other hand, it does always give an answer because 
no factorization is needed. 

The aim of this note is to exhibit an alternative factorization-free method for 
computing the global height of an algebraic point on an elliptic curve which stands 
somewhere between the two algorithms above. Like the method in (3), ours is 
extremely simple, requiring almost no knowledge of the number field or the elliptic 
curve and it does not require the curve to be in minimal form. However, our method 
gives more information than (3) since it also yields the archimedean and non- 
archimedean parts of the lic;iglit separately. (If the fac;torization of the discriminant 
is known then it will give a complete decomposition of the global height as a sum of 
local heights.) Our method can also be made much quicker. It gives less accuracy 



(2) 




(3) 



h{Q) = - lim 4-"/i(2"Q). 
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than Silverman's algorithm but high accuracy is not always required. In certain 
cases, our method can be used in tandem with Silverman's algorithm: see Example 
9 in Section 4. 

An example of a calculation which does not require great accuracy is the search 
for algebraic points with small height. This requires an accuracy of only 3 or 4 
significant figures together with an easy way of handling algebraic number fields. 
Calculations such as these would shed light on the elliptic Lehmer problem. In the 
classical Lehmer problem and its derivatives (see [EW99]) there are many numerical 
examples. Up to now, there is very little data for the elliptic Lehmer problem 
outside the rational case. To illustrate our method, we give a couple of examples of 
small height points found with an easy search: See Examples 11 and 12 in Section 
4. Our method uses elliptic divisibility sequences, which are sequences associated to 
the division points on the curves. At the conclusion of the paper, wc will make the 
point that our methodology not only gives a simple way of handling elliptic curves 
over algebraic number fields; it also throws up the possibility that small height 
points might be found more efficiently by searching for growth rates of elliptic 
divisibility sequences. 

2. Elliptic divisibility sequences 

The essential ingredient in the approach taken here is the sequence of elliptic 
division polynomials. For background on see [Sil86] and [Sil94] . 

Definition 1. With the notation of (1), define 

62 = ai+4a2, 
64 = 2a4 + aia3, 
be = al + Aae, 

bs = aifle + 40206 — ciia3<i4 + 02(13 — ci\. 
Define a sequence (V'n) of polynomials in OK[x,y] as follows: ■^o = 0,ipi = 1, 
= 2y + aix + as, 
tps = 3x^ + b2X^ + Sb^x"^ + 5bex + bs, and 

^/)4 = ^^(^2x^ + b2X^ + 5bix'^ + 10bQX^ + 10bsx'^ + {b2bs-b4b6)x + b4bs-bl). 
Now define inductively for n > 2 

'4'2n+l = 4'n+2^n " ^n-lTpn+l and 
ll^2ni'2 = V'n(V'n+2'0^_l " V'n-2'0^+l)- 

It is straightforward to check that each -0„ g Ok[x, y]. It is known that tp"^ is a 
polynomial in x alone having degree — 1 and leading coefficient . The zeros of 
ipn are the x-coordinates of the points on E with order dividing n. Write ipniQ) for 
ipn evaluated at the point Q = {x,y). The sequence V'n(Q) is known as an elliptic 
divisibility sequence: Writing = ijJniQ) gives the elliptic recurrence relation 

(4) 

for all m > n > 0. Those elliptic divisibility sequences were studied in an abstract 
setting by Morgan Ward in a series of papers - see [War48] for the details. Shipsey's 
thesis [ShiOO] contains more recent applications of these sequences, which satisfy 
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the same recursion formulae as the division polynomials. If Q is not a torsion point 
then the terms of the sequence {tpniQ)) are always non-zero. The single relation 

(4) gives rise to the two relations 

(5) U2„+i = Un+2ui - Mn-iM^+i, and 

(6) U2nU2 = ■U„+2U„U^_i - U„M„_2W^+i. 

For computational purposes, it is useful to notice that the two relations (5) and 

(6) can be subsumed into the single relation 

2 2 

■"«"Ln/L(«+l)/2jJ = '"L(«+4)/2J"L"/2J'^L("-1)/2J ~ L("+1)/2J " L("-3)/2J L("+2)/2J ' 

where [-J denotes, as usual, the integer part. 
Write 

(7) A = -bibs - 861 - 276^ + 9626466 e Ok 

for the discriminant of the curve E. The valuations v with |A|^ < 1 are precisely 
the valuations corresponding to primes at which E reduces to a singular curve. Let 
D = iV^iQ(A) and write T for the set of rational primes which divide D. Given an 
algebraic integral point Q e E{K), let 

En = \NK\ii{MQ))\ and F„ = \En\ \{ \En\p. 
Our method comes from the following theorem. 

Theorem 2. Let Q denote an algebraic integral point on E{K). Then 

(8) h{Q) = - lim \\ogFn. 

d n— »oo n 

The total archimedean contribution is the limit 

(9) /loo(Q) = ^ lim log En. 

The formula (8) is independent of the equation defining the curve. It might 
appear that a factorization of the discriminant is required but that is not so. Later 
we discuss the practicalities of implementing the method. The method extends to 
rational points provided one knows the valuations at which the .x-coordinate is not 
integral. The denominator can be cleared to obtain an integral point on a curve 
isomorphic to the starting curve, so the height is unchanged. The proof of Theorem 
2 follows in the next section. It uses some detailed knowledge of local heights. For 
readers interested only in the application of the formula, the next section can be 
skipped. 

3. Local and global heights 

The global height is known to be expressible as a sum of local heights, one for each 
element of Mk- There is a function, continuous away from infinity, : E^Q^) R 
which satisfies the local parallelogram law 



(10) A^(P + Q) + Xv{P-Q) = 2A„(Q) + 2A^(P) - log \x{Q) - x{P)\^. 
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Let Hy = [Ky : Qw]/[K : Q] denote the usual local normalizing constants, where v 
lies above w on Q. Then 

(11) h{Q)= ^vXviQ)- 

veMK 

The fundamental observation behind our method is the elliptic Jensen formula from 
[EF96]. If G is a compact group containing Q, with normalized Haar measure hg, 

then 

(12) XviQ) =2 [ log \x{P) - x{Q)UdtiG{P) 

Jg 

by integrating and canceling three terms in (10). 

If it is required that the expression \p{Q) — \ log |a;(Q)|p be bounded as Q — > 0, 
then there is only one such map, the canonical local height. It is important to 
note that in [Sil94], local heights are normalized to make them invariant under 
isomorphisms. This involves adding a constant which depends on the discriminant 
of E. The local heights in [Sil94] satisfy a different form of (10). 

There are explicit formulae for each of the local heights (see [Sil86] and [Sil94], 
or [Eve99] for an alternative approach). For non-archimedean valuations v where 
Q has good reduction, 

(13) A„(0) = ilogmax{l,|x(Q)|4. 

Notice in particular that if x{Q) is integral at v and Q has good reduction at v 
then \v{Q) = 0. The bad reduction case is more involved but we need to deal only 
with split multiplicative reduction (see [Sil94, p. 362] for details on this). This is 
because we may pass to an extension field where the reduction becomes of this type 
— the local height is functorial in the sense that it respects this passage. In the 
split multiplicative case, the points on the curve are isomorphic to the points on 
the Tate curve K^/q^, where q € has < 1. The explicit formulae for the 
X and y coordinates of a non-identity point are given in terms of the uniformizing 
parameter u € by 

„ „ \ ^ 2 \ ^ 



neZ ^ ^ ' n>l ^ ^ ' 

(l-g"u)3 +^ (l-g")2- 

It is clear that x„ = Xuq and x„ = Suppose Q corresponds to the point 

u € K* and assume, by invariance under multiplication by q, that u lies in the 
fundamental domain {u \ \q\y < \u\y < 1}. Then (by [Eve99] or [Sil94]), writing 
p = log|w|^/log|5|^, 

-log|l-u|„ if = 1, 

|(p-P^)l0g|g'U if < 1- 

Notice that for \u\y = 1, the local height is non-negative, while if \u\y < 1 the local 
height is negative. 



Theorem 3. Let Q denote a non-torsion integral point. Suppose v\oo or v corre- 
sponds to a prime of singular reduction. In the latter case, assume equation (1) is 
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(14) AloglV'«(Q)|. = A.(g)+/ ^«^°Sn)^M ^fv\oc, 



in minimal form. Then there are positive constants A and B <2 such that 

(logn)^ /n"^) if v\oo, 
0{l/n^) otherwise. 

Proof. If t;|oo, we claim first that 

(15) lim log \Mx{Q))\v = Aoo(Q)- 

Formula (15) was proved in the rational case in [EW99, Theorem 6.18]; the proof 
is sketched here in the general case. The height is functorial in the sense that it 
respects field extensions. Thus we may assume v corresponds to an embedding of K 
into C. Take G = E{C) in the elliptic Jensen formula (12). The points of r?,-torsion 
are dense and uniformly distributed in E(C) as n ^ oo, so the limit sum over the 
torsion points will tend to the integral when the integrand is continuous. Note that 
the torsion points occur in pairs usually. Working with iJJniQ) they only occur with 
multiplicity 1, hence the formula differs from the usual elliptic Jensen formula in 
this respect. The only potential problem arises from torsion points close to Q: by 
[Dav95], for x = x{Q) with nQ = 0, \x — x{Q)\y > n~'^ for some C > which 
depends on E and Q only. This inequality is enough to imply that the Riemann 
sum given by the n-torsion points for log |a; — x{Q)\y converges, which gives (15), 
and the explicit error term gives the estimate in (14). 

Assume now that v is non-archimedean, corresponding to a prime of singular 
reduction. Let 0„ denote any complete, algebraically closed field containing K^. 
Assume Q is integral, |a;((5)|u < 1. Now use the parametrisation of the curve 
described before. The points of order dividing n on the Tate curve are precisely 
those of the form ^^g-'/", 1 < i,j < n, where C € denotes a fixed, primitive nth 
root of unity in fly. We claim that 

(16) lim log \Mx{Q))\v = XviQ). 

n— »oo 

Let G denote the closure of the torsion points: G is not compact, so the u-adic 
elliptic Jensen formula cannot be used. Instead we use a variant of the Shnirelman 
integral: for / : E{Cty) M. define the elliptic Shnirelman integral to be 



L 



f{Q)dQ = lim V /(r) 

n, — >no I * 



n— *oo 

nr=0 



'G 

whenever the limit exists. 

We claim firstly that for any P e ^^(Qp), the Shnirelman integral 

(17) / A^(P + Q)dQ = S{E) exists and is independent of P. 
Jg 

First assume that P is the identity. Using the explicit formula for the local height 
gives 

n— 1 n— 1 n— 1 , / . 

(18) --^Ei°g|i-ck---^EEM^ 

The first sum is bounded by log which vanishes in the limit; the second 

sum converges to — ^. For the general case, let P correspond to the point u on 
the multiplicative Tate curve. If for some large n no j has y — 1 then the 
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analogous sum to (18) is close to — ^ by the same argument. Assume therefore 
that there is a j with this property. Then the first sum in (18) is replaced by 

n-l 

(19) ^ log |1 - - bg |1 - {q'urU, 

i=0 

where r = j /n only depends on u. By w-adic elliptic transcendence theory (sec 
[Dav95]), there is a lower bound for log |1 — {q^u)"-\y of the form — (logn)"^, where 
A depends on E and u = u{P) only. It follows that the first sum vanishes in the 
limit as before. The second sum in (18) is simply rearranged under rotation by u, 
so converges to — ^ as before. This proves (17). 

The claimed limit (16) now follows by taking the elliptic Shnirelman integral of 
both sides of the parallelogram law (10) and noting that wc coimt torsion points 
in pairs. Equation (17) shows that three terms cancel to leave the required limit. 
The error term in (14) comes from the lower bound used above. □ 

These estimates arc enough to prove the main formula. 

Proof, (of Theorem 2) It will be convenient to use normalized heights, so define 

z^«(<3) = A„(Q)- ^log|A|„. 
Then Uy is invariant under isomorphism (see [Sil94]). By the product formula, 

V V 

Also, by Theorem 3, 

(20) lim 4log|V'n(<3)A-"'/^2|. = !/„(Q). 

n— >oo n 

For any a G K, |Ar^|Q(Q!)| = Yl^^^ \o(\v Therefore, using the product formula 
again, 

log|F„|=^log|Vn(Q)A-"'/i2|,+ ^ |V„(Q)A-"'/i2|,. 

v\oo |A|„<1 

The reason for introducing the factor A~"^/^^ is to take account of the possibility 
that the equation (1) is not in minimal form at some non-archimedean v corre- 
sponding to a prime of singular reduction. The change of coordinates to put the 
equation into minimal form is an isomorphism, so it leaves the local height I'viQ) 
invariant. Now Theorem 2 follows directly from Theorem 3. □ 

4. Examples 

It appears as though we need to factorize D = Nx^q{A) in order to apply 
Theorem 2. However, Theorem 3 says that for a prime p € T, |-E„|p is approximately 
Z"^ where I is the total contribution to the height from the valuations which extend 
I • [p. Therefore, asymptotically, it suffices to compute the gcd of £"„ with a suitably 
high power of D. Since the local height is t log |A|^ for some < t < 1, the power 
of D can be n^. This is likely to be a huge number and there are ways to avoid 
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making this computation. In practice, it is often sufficient to find tlie gcd of En 
and En+i- In other words: 

(21) kQ) = 3 4 log ( Aijf^j, ^ ) ■ 

In the last section of the paper, we will discuss other ways to speed up the calcu- 
lations. 

The following examples were calculated using Pari-GP, see [GP] , simply applying 
the basic formula (21). In the main we have only exhibited calculations which were 

executed within a few seconds at most. Wc begin by applying our method to 
examples in the literature the first two examples come from [SilSS]. 

Example 4. Let the curve be 

E -.y"^ + y ^ - x"^, 

the field K = Q(V^), and Q = (2 + 1 + 2y^). Taking n = 100 gives 

h{Q) .45744 ... to be compared with Silverman's accurate value of .45754 

When n = 200, we obtain the better approximation h{Q) ~ .45753 

Example 5. Let K = Q{i), let the curve be 

E ly'^ +4y = + 6ix, 

and Q = (0,0). Taking n = 200 gives h{Q) ^ .33688... to be compared with 
Silverman's accurate value of .33689 . . . The archimcdcan height is ^ .51016 . . . 

The next example illustrates that the curve does not need to be in minimal form 
for the method to work. 

Example 6. Let the curve be 

E ■.y'^ =x^ -16x+ 16, 

and let Q = (0,4). Taking n = 150 gives a value h{Q) ^ .02549 . . . with a value 
^ .7186 . . . for the archimedean component. The calculation speeds up if we notice 
that E is isomorphic to the curve y^ + y = x^ — x, with Q mapping to P = (0, 0) 
under the isomorphism. Taking n ~ 150 gives h{P) = h{Q) ~ .02555 . . . which is 
more accurate, and quicker, due to the slower growth rate of the sequence En ■ 

The next examples are manufactured to highlight one of the strengths of our 
approach: It always gives an answer even if a tricky factorization appears to be 
necessary. Silverman's approach in [Sil97] computes all the local heights then sums 
these to give the global height. To compute a local non- archimcdcan height, the 
curve needs to be in minimal form for that valuation. If the factorization of A is 
known then the curve can easily be rendered in minimal form for each valuation 
corresponding to the prime factors of A. Even if the factorization is not known, it 
is usually possible to proceed. With our earlier notation, define 

C4 = &i - 24&4 and ce = -hi + 36&2&4 - 216&6. 

In [Sil97], working over Q, Silverman shows that if the factorization of c = gcd(c4, ce) 
is known then the curve can be put in global minimal form so the local heights can 
all be computed. Over a number field with class number greater than 1, a global 
minimal equation will not always exist. Presumably the same kind of argument 
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would work nonetheless. Therefore, the next example is chosen to highlight a 
potential difficulty: c may have a large gcd with the discriminant. In this case, 
factorizing c is not much easier than factorizing the discriminant. 

Example 7. Let K = Q and let m € N denote an integer that is not factorizable 
in reasonable time. Consider the curve 

E = x^ +mx + m'^. 

Let Q denote the point (0,m) G E{K). For this curve, m\c and Silverman's algo- 
rithm now requires auxiliary arguments (see Remark 8 below) . Let m = pq where 
p and q denote the next primes after 10^° and 10*°. With n = 50, within a minute, 
our method gave h{Q) ^ 13.657 . . . with an archimedean height ^ 53.936 .... We 
also used a floating point for the archimedean contribution: with n = 300 we ob- 
tained ~ 53.956 The Pari-GP routine for computing heights returned a warning 

that the calculation would take several hours. This is all due to the difficulty of 
factorizing to. 

Remark 8. The referee pointed out to us that Silverman's method can be made 
to work in this example because it can be checked that no 4th power of a prime 
divides m. 

The next example shows how our method can be used in tandem with Silverman's 

algorithm. 

Example 9. With E as in the previous example, let Q denote an algebraic point 
with x{Q) = 1. Even a small value of n shows the total non- archimedean contri- 
bution is zero. Thus one may revert immediately to a general algebraic version of 
Silverman's method to obtain a very accurate value for the global height, which 
is entirely concentrated at the archimedean valuation. Using our method, with 
n = 300 and with floating point arithmetic on the two archimedean valuations, we 
obtained the value ~ 53.956 ... for the total archimedean contribution. Note the 
value is close to the previous example - this is no real surprise, as the archimedean 
heights are continuous. 

Our next example is an algebraic version of Example 7. 

Example 10. Let f{x) ~ x^"^ + x + 996 and let K = Q{p) where p denotes any 
root of f{x). Let 9 = 1 — 1728p^, and consider the curve 

E -.y^ = x^ + ex + e^. 

Let Q denote the point (0,6') e E{K). With n = 35, in under one minute our 
method gives h{Q) ~ 15.595 The archimedean height is ~ 50.732 As in 

the previous example, 6\c. It took Pari-gp 30 minutes to find the factorization 

C = 11978293086538309 x 904414027740749856394559037844972335934195571 
of C = \N ji\Q{6)\: it would have taken at least as long to factorize the ideal (c). 

Finally, we give two examples of small height points over algebraic number fields. 
Our method is simple to apply and can be used to search for small height points in 
connection with the c^lliptic Lehmer problem. There is very little data associated 
with this problem beyond the rational case. We hope our paper might inspire an 
attempt to gather some data. 
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Example 11. Let w denote a non-trivial cube root of unity and K = Q{w). Let 
E be the elliptic curve 

=x^ - 243x + 3726 + 10368w. 

The point Q = (3 - 12m;, -lOSw^) has global height h{Q) ~ .01032 .... This was 
found taking n = 512 = 2^ and using Shipsey's algorithm from the next section. 
Although the coefficients of the curve might seem large, this example arises from 
a simple elliptic divisibility sequence. Starting from the sequence 0, 1, 1 + 1 + 
w,l + w, . . . we used Morgan Ward's formulas (see [War48, p. 50]) to obtain a point 
on a curve with coefficients in K whose denominators can be cleared to give E as 
above. 

Example 12. Let u = (1 + V^)/2 and K = Q{u). The curve E is 

y'^ ^x^ + (-2214 + 1215'«).x + 40878 - 23328u 

and the point is Q = (3 — 9m, 108 — 108u). Taking n — 512 as before gives h{Q) ~ 
.00971 .... This example came from the elliptic divisibility sequence which begins 
in the modest way 0, 1,1 — u, —2 + u, 5 — 3m, . . . Inverting this sequence gives a point 
on a curve over K and clearing the denominators gives E as above. 

Two comments needs to be made about these examples. Firstly, although these 
heights are small, no records have been broken. The elliptic Lehmer problem pre- 
dicts a lower bound for dh{Q) where d is the degree of the number field. Multiplying 
both the above by 2 shows these values arc not smaller than the height .01028) 
of the rational point Q = (13, 33) on the curve y'^ + xy + y = ~ x'^ — 48x + 147, 
which appears in [Sil94, p. 480]. Secondly, these examples hint at an interesting 
possibility concerning the search for small height points. Perhaps restricting to 
elliptic divisibility sequences represents an efficiency gain in the sense that small 
height points will arise from sequences whose first few terms are arithmetically 
simple. 

5. Accuracy 

In (14), the error term is estimated using methods from elliptic transcendence 
theory. In [EEW], we investigated the error in practice and found it to be about 
0(l/n^), even for quite modest values of n. For small values of n, the values of 
En can be computed easily using Pari-GP. Several options for achieving greater 
accuracy are listed below. However, we stress again that there are certain physical 
limits to this method which go beyond computational considerations: Accuracy 
of 80 significant figures would involve computing a number with approximately 
10^° decimal digits. Even storing such numbers is beyond the capabilities of any 
computer. 

1. The archimedean and non-archimedean contributions can be computed sep- 
arately and this allows the computations to be speeded up. For the archimedean 
contribution, we can use floating point arithmetic which greatly enhances the speed. 
For the non-archimedean contribution, we only have to keep a running total of the 
gcd so big integer arithmetic can be avoided. If the factorization of the discriminant 
is known then p-adic arithmetic may be used. 

2. Since the computation of the height involves big numbers, it is useful to 
use a package which allows these to be handled efficiently. We are grateful to 
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John Cannon for implementing our algorithm in Magma [Mag] which gave greater 
accuracy. 

3. Memory is clearly an issue with the method we are describing since it involves 
the calculation of huge numbers. Storage can be maximized by computing En for 
special n, without needing to know all Em for m < n. Shipsey [ShiOO] gives an 
algorithm that computes En in 0(log n) arithmetic operations. Note the distinction 
between arithmetic operations and bit operations: By arithmetic operation is meant 
one of the familiar operations of adding or multiplying. The special case where 
n = 2^ is especially easy to implement and we describe it below. We are grateful 
to Rachel Shipsey for her permission to include it here. 

Now follows Shipsey 's algorithm for computing En when n = 2^: Given Q and 
E, find tpi{Q) for i = 2, 3, . . . , 7 using the formulae given before. Let 



Ti = 1, c/i = MQ), Vi = MQ), Wi = MQ),^i = MQ), = MQ), Zi = MQ). 



After N — 2 iterations the value of W is ipniQ), and En = \NK\Q{ipn{Q))\- 

Computing En requires O(logn) arithmetic operations. The operations required 
for (3) satisfy the same bound. However, our method can be speeded up in two 
ways. Firstly, by using floating point arithmetic for the archimedean contribution. 
Secondly, the homogeneity of the formulae make it possible to keep a running total 
for the gcd computation, yielding the non-archimedean contribution. By succes- 
sively factoring out the gcd, the calculations proceed with smaller integers, making 
the method much faster. 
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